javaredis/lettuce #3187Not a task: already works

Bump netty.version to 4.1.118.Final

envgap__redis__lettuce-3187

Original GitHub issue ↗Dated source checkout ↗Opened 2025-02-19

01 / FAILURE SIGNATURE

As reported upstream

No identifying execution failure has been captured.

Not a benchmark task.

The project already builds and runs before the fix, so there is nothing to repair.

02 / ENVIRONMENT RECIPE

Base commit: ba272b0fe1ea6c618f88aa265c3cfde011f1d4ba
Manifest: pom.xml
Reproduce: Awaiting issue-specific recipe
Run under trace: Awaiting a meaningful runtime command

03 / ORIGINAL ISSUE TEXT

redis/lettuce #3187 · read the original issue

See: [CVE-2025-24970](https://www.cve.org/CVERecord?id=CVE-2025-24970)

Bumping `netty.version` to `4.1.118.Final` should resolve this.

Can `6.5.4.RELEASE` be created (quickly?) with this update, to quiet down "Synk" and related vulnerability scanners?

Continue on GitHub ↗

04 / LABELS

Labels from the report text only; not yet run

No supported category has been assigned.

Label rules and the text that matched

[]